Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/96/2cb0dc-f7c0-4b68-9391-ea740ec1d1f6/1/DcnBtxcVahijTZMjtnoKA-2oWsk.mft
File: DcnBtxcVahijTZMjtnoKA-2oWsk.mft (raw, json)
Hash identifier: jgdJw8U37w3RSymn/Bgg1433vnooBp6xNpStlIutY00=
Subject key identifier: C4:84:FB:1A:A8:0A:88:88:50:DD:26:55:61:6B:B9:82:B0:60:F9:5D
Authority key identifier: 0D:C9:C1:B7:17:15:6A:18:A3:4D:93:23:B6:7A:0A:03:ED:A8:5A:C9
Certificate issuer: /CN=0dc9c1b717156a18a34d9323b67a0a03eda85ac9
Certificate serial: 019E1CB4EF4CE631982C7B019A33A68C7290
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DcnBtxcVahijTZMjtnoKA-2oWsk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/96/2cb0dc-f7c0-4b68-9391-ea740ec1d1f6/1/DcnBtxcVahijTZMjtnoKA-2oWsk.mft
Manifest number: 1903
Signing time: Tue 12 May 2026 15:01:20 +0000
Manifest this update: Tue 12 May 2026 15:01:20 +0000
Manifest next update: Wed 13 May 2026 15:01:20 +0000
Files and hashes: 1: DcnBtxcVahijTZMjtnoKA-2oWsk.crl (hash: fOKu4gAJy1ERfPQfrr/iZZFD1PXLlYu34VhkjEejRYE=)
2: oCylTxdWStUJKd43isiQRqgUx2I.roa (hash: BA+lkIFGOjmKiy8Zq7wyWqkb5r7mqiejaQ24ZYtS4FQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/96/2cb0dc-f7c0-4b68-9391-ea740ec1d1f6/1/DcnBtxcVahijTZMjtnoKA-2oWsk.crl
rsync://rpki.ripe.net/repository/DEFAULT/96/2cb0dc-f7c0-4b68-9391-ea740ec1d1f6/1/DcnBtxcVahijTZMjtnoKA-2oWsk.mft
rsync://rpki.ripe.net/repository/DEFAULT/DcnBtxcVahijTZMjtnoKA-2oWsk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 May 2026 14:18:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:1c:b4:ef:4c:e6:31:98:2c:7b:01:9a:33:a6:8c:72:90
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0dc9c1b717156a18a34d9323b67a0a03eda85ac9
Validity
Not Before: May 12 15:01:20 2026 GMT
Not After : May 13 15:01:20 2026 GMT
Subject: CN=c484fb1aa80a888850dd2655616bb982b060f95d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:04:a6:c7:77:9e:1a:5e:56:52:d3:fa:e8:25:
cb:90:87:b7:1c:f1:78:99:3d:d6:fb:1e:9a:eb:db:
53:5c:a7:73:36:00:5b:24:1e:2e:2c:f2:e7:d4:6b:
bb:c3:ff:c8:39:da:8b:c3:17:60:2a:15:61:0c:8b:
84:b2:76:c9:bc:18:38:7a:b2:7d:5c:9a:45:b9:b5:
bb:12:c8:b5:b2:5d:bd:0a:18:4a:97:94:b2:34:a6:
83:1d:ed:0b:34:cd:6b:0e:67:9a:e5:fd:51:9d:06:
18:33:80:e0:55:34:79:6a:56:19:34:07:a8:0f:06:
10:b8:50:1a:9d:11:ee:77:e4:ad:0d:57:89:2c:08:
f0:8d:b5:31:ef:78:8a:06:f8:95:7e:4b:d3:ee:ed:
ca:50:cb:80:4b:7a:73:7e:dd:86:21:1d:ee:a8:a2:
3d:6a:77:93:6c:d8:5b:1d:2e:3b:66:ea:ef:6a:2f:
05:ca:94:f2:c7:a8:3e:4e:5c:76:58:69:f0:62:8b:
a3:d1:46:7c:3b:ac:09:fc:9d:40:8d:53:f1:9b:62:
16:38:c4:fe:e2:87:4b:69:3a:1f:a8:59:84:03:1c:
b4:ea:52:a6:b6:50:4c:27:96:3e:83:e0:d9:a6:b2:
14:64:78:e6:8e:bd:82:02:ea:59:56:b5:6d:42:b5:
fe:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C4:84:FB:1A:A8:0A:88:88:50:DD:26:55:61:6B:B9:82:B0:60:F9:5D
X509v3 Authority Key Identifier:
keyid:0D:C9:C1:B7:17:15:6A:18:A3:4D:93:23:B6:7A:0A:03:ED:A8:5A:C9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DcnBtxcVahijTZMjtnoKA-2oWsk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/96/2cb0dc-f7c0-4b68-9391-ea740ec1d1f6/1/DcnBtxcVahijTZMjtnoKA-2oWsk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/96/2cb0dc-f7c0-4b68-9391-ea740ec1d1f6/1/DcnBtxcVahijTZMjtnoKA-2oWsk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7d:d4:68:8d:a5:40:02:5b:53:b4:1c:92:d1:54:36:c4:c9:62:
bc:d2:64:92:05:19:2a:3d:0b:0d:72:82:2e:44:f5:41:01:f3:
b3:aa:fc:8f:4e:57:6c:bb:d6:5e:a3:61:6d:ee:e9:b5:09:78:
58:f8:50:2d:2e:9d:6b:38:ee:dc:8a:63:ad:02:42:e2:d0:81:
99:30:61:1d:41:c7:f5:a6:1e:78:c4:51:3a:ec:05:f5:55:07:
e7:8d:ca:c8:38:cc:99:d5:45:e3:31:b6:7c:9d:49:2d:b1:e2:
24:09:59:b2:bc:0f:be:1c:87:36:82:0b:f4:4e:40:9f:7e:1e:
73:2e:b4:1a:a2:c6:11:ff:5b:fa:a4:d7:3b:08:b9:93:20:08:
5c:86:11:3e:b2:ae:39:00:ab:a8:53:03:62:75:cf:bc:01:28:
7d:aa:6f:b3:e0:41:fd:9f:6f:a7:62:2b:04:2a:17:8f:99:fd:
94:a7:e1:90:89:5b:fe:99:f8:1b:8e:6f:1e:42:2e:1f:4f:f0:
9a:3d:83:80:cc:1e:09:ae:41:32:6a:e9:0c:ba:66:9e:bc:81:
35:89:65:66:26:91:1b:02:57:fa:3e:e6:e9:48:35:aa:91:32:
05:51:8d:bc:85:bb:a3:3d:90:97:b3:81:6d:83:c3:22:49:4d:
c6:58:14:ea
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ4ctO9M5jGYLHsBmjOmjHKQMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDBkYzljMWI3MTcxNTZhMThhMzRkOTMyM2I2N2EwYTAzZWRh
ODVhYzkwHhcNMjYwNTEyMTUwMTIwWhcNMjYwNTEzMTUwMTIwWjAzMTEwLwYDVQQD
EyhjNDg0ZmIxYWE4MGE4ODg4NTBkZDI2NTU2MTZiYjk4MmIwNjBmOTVkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAngSmx3eeGl5WUtP66CXLkIe3HPF4
mT3W+x6a69tTXKdzNgBbJB4uLPLn1Gu7w//IOdqLwxdgKhVhDIuEsnbJvBg4erJ9
XJpFubW7Esi1sl29ChhKl5SyNKaDHe0LNM1rDmea5f1RnQYYM4DgVTR5alYZNAeo
DwYQuFAanRHud+StDVeJLAjwjbUx73iKBviVfkvT7u3KUMuAS3pzft2GIR3uqKI9
aneTbNhbHS47Zurvai8FypTyx6g+Tlx2WGnwYouj0UZ8O6wJ/J1AjVPxm2IWOMT+
4odLaTofqFmEAxy06lKmtlBMJ5Y+g+DZprIUZHjmjr2CAupZVrVtQrX+pwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFMSE+xqoCoiIUN0mVWFruYKwYPldMB8GA1UdIwQY
MBaAFA3JwbcXFWoYo02TI7Z6CgPtqFrJMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvRGNuQnR4Y1ZhaGlqVFpNanRub0tBLTJvV3NrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85Ni8yY2IwZGMtZjdjMC00YjY4LTkzOTEt
ZWE3NDBlYzFkMWY2LzEvRGNuQnR4Y1ZhaGlqVFpNanRub0tBLTJvV3NrLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85Ni8yY2IwZGMtZjdjMC00YjY4LTkzOTEtZWE3NDBlYzFkMWY2
LzEvRGNuQnR4Y1ZhaGlqVFpNanRub0tBLTJvV3NrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAfdRojaVA
AltTtByS0VQ2xMlivNJkkgUZKj0LDXKCLkT1QQHzs6r8j05XbLvWXqNhbe7ptQl4
WPhQLS6dazju3IpjrQJC4tCBmTBhHUHH9aYeeMRROuwF9VUH543KyDjMmdVF4zG2
fJ1JLbHiJAlZsrwPvhyHNoIL9E5An34ecy60GqLGEf9b+qTXOwi5kyAIXIYRPrKu
OQCrqFMDYnXPvAEofapvs+BB/Z9vp2IrBCoXj5n9lKfhkIlb/pn4G45vHkIuH0/w
mj2DgMweCa5BMmrpDLpmnryBNYllZiaRGwJX+j7m6Ug1qpEyBVGNvIW7oz2Ql7OB
bYPDIklNxlgU6g==
-----END CERTIFICATE-----
Generated at Tue May 12 21:15:17 2026 by rpki-client